Lucene search
GitHub Advisory DatabaseGHSA-R96C-57PF-9JJMHistoryFeb 07, 2019 - 6:17 p.m.
Prototype Pollution in node.extend
2019-02-0718:17:34
CWE-400
GitHub Advisory Database
github.com
7
0.004 Low
EPSS
Percentile
73.2%
Versions of node.extend before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.
Recommendation
Update to version 1.1.7, 2.0.1 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node.extend | eq | 2.0.0 | |
| node.extend | lt | 1.1.7 |
Related
prion
prion
Buffer overflow
2019-02-01 18:29:00
debiancve
debiancve
CVE-2018-16491
2019-02-01 18:29:00
veracode
veracode
Prototype Pollution
2019-02-04 01:17:46
ubuntucve
ubuntucve
CVE-2018-16491
2019-02-01 00:00:00
redhatcve
redhatcve
CVE-2018-16491
2019-10-12 01:35:29
osv
osv
Prototype Pollution in node.extend
2019-02-07 18:17:34
cve
cve
CVE-2018-16491
2019-02-01 18:29:00
cvelist
cvelist
CVE-2018-16491
2019-02-01 18:00:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack in node.extend
2018-10-30 11:42:18
nodejs
nodejs
Prototype Pollution
2019-02-06 01:11:08
